VulertSecurity VulertSecurity

Vulnerability Database · Packagist · symfony/symfony · Version

symfony/symfony 2.0.4

2.0.4 is affected by 11 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 3 Medium 6 Low 1 Unrated 0

All symfony/symfony versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

symfony/symfony 2.0.4 vulnerabilities

11 vulnerabilities cover symfony/symfony 2.0.4. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Symfony XML decoding attack vector through external entities in symfony/symfony 9.8 critical 2.0.11 30 May 2024
CVE-2014-6072: Symfony Web Profiler Cross-Site Request Forgery Vulnerability 8.1 high 2.3.19 30 May 2024
Symfony XML Entity Expansion security vulnerability in symfony/symfony 7.5 high 2.0.17 30 May 2024
User Identity Switch Vulnerability in Symfony/symfony 6.5 medium 2.0.6 30 May 2024
CVE-2013-4752: Symfony Host Header Injection vulnerability in the HttpFoundation component 6.1 medium 2.0.24 05 May 2022
Symfony2 Improper IP Based Access Control 5.9 medium 2.0.19 30 May 2024
CVE-2024-50343: Symfony Validator Regex Vulnerability Leading to Incorrect Input Handling 3.1 low 5.4.43 06 Nov 2024
CVE-2012-6432: Symfony Access Control Vulnerability in symfony/symfony N/A medium No fix published 17 May 2022
CVE-2013-5958: Symfony Denial of Service Via Long Password Hashing N/A medium 2.0.25 17 May 2022
CVE-2015-2308: Symfony Vulnerable to PHP Eval Injection N/A medium 2.3.27 17 May 2022
CVE-2013-1348: Symphony Vulnerable to PHP Code Injection via YAML Parsing N/A high 2.0.22 17 May 2022

Looking for another version, or everything Vulert holds for symfony/symfony?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About symfony/symfony 2.0.4

Is symfony/symfony 2.0.4 vulnerable?

Yes. 11 vulnerabilities in the Vulert database cover symfony/symfony 2.0.4: 1 critical, 3 high, 6 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor symfony/symfony for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the symfony/symfony version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.